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Abstract 



The purpose of this paper is to give an exposition of material dealing with constructive logics, 
typed A-calculi, and linear logic. The first part of this paper gives an exposition of background 
material (with the exception of the Girard-translation of classical logic into intuitionistic logic, 
which is new). This second part is devoted to linear logic and proof nets. Particular attention 
is given to the algebraic semantics (in Girard's terminology, phase semantics) of linear logic. 
We show how phase spaces arise as an instance of a Galois connection. We also give a direct 
proof of the correctness of the Danos-Regnier criterion for proof nets. This proof is based on a 
purely graph-theoretic decomposition lemma. As a corollary, we give an 0(n 2 )-time algorithm 
for testing whether a proof net is correct. Although the existence of such an algorithm has 
been announced by Girard, our algorithm appears to be original. 



Resume 



Le but de cet article est de donner une presentation d'elements de logique constructive, 
de lambda calcul type, et de logique lineaire. Dans la premiere partie de cet article nous 
presentons les bases (a 1' exception de la traduction de Girard de la logique classique en logique 
intuitionniste, qui est nouvelle). Dans cette deuxieme partie sont traites la logique lineaire et 
les reseaux de preuves. Une attention particuliere est faite a la semantique algebrique (appelee 
dans la terminologie de Girard, semantique des phases) de la logique lineaire. Nous montrons 
comment la notion d'espace de phases apparait comme une instance d'une connection de 
Galois. Nous donnons aussi une preuve directe de la correction du critere de Danos et Regnier 
pour les reseaux de preuves. Cette preuve repose sur un lemme de decomposition de pure 
theorie des graphes. Comme corollaire, nous obtenons un algorithme en temps 0(n 2 ) pour 
tester si un reseaux de preuves est correct. Bien que l'existence d'un tel algorithme ait ete 
annoncee par Girard, notre algorithme semble etre original. 
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1 Core Linear Logic and Propositional Linear Logic 



In Girard's linear logic [7], the connectives A and V are split into two versions: the 
multiplicative version of A and V, denoted as ® and P , and the additive version of A and 
V, denoted as & and ©. The constants T (truth) and _L (falsity) are also split into their 
multiplicative version 1 and _L, and their additive version T and 0. We confess having some 
difficulties remembering Girard's notation for the connectives and constants, and we propose to 
use the following notation which we find reasonably motivated semantically, and thus easier to 
memorize. The multiplicative version of A and V is denoted as ® (called tensor) and (J (called 
par), and the additive version of A and V is denoted as & and ©. The constants T (truth) and 
_L (falsity) have their multiplicative version I and _L, and their additive version 1 and 0. We 
also have linear implication, denoted as -o (which is a multiplicative), and linear negation, 
denoted as - 1 . For pedagogical reasons, we feel that it is preferable to present the inference 
rules of linear logic in terms of two-sided sequents T i- A, with explicit rules for linear 
negation (- 1 ). One can then show that negation is an involution satisfying De Morgan-like 
properties, and that every proposition is equivalent to another proposition in "negation normal 
form", in which negation only applies to atoms. Thus, it is possibe to describe linear logic in 
terms of one-sided sequents i- A, and this is the approach originally followed by Girard [7]. 
The presentation using one-sided sequents also has the technical advantage of cutting down in 
half the number of cases to be considered in proving properties of the logic, cut elimination 
for example. On the other hand, the presentation using two-sided sequents is better suited if 
one is interested in the "intuitionistic fragment" of linear logic in which the righthand side A 
of a sequent T i- A contains at most one proposition. 

Definition 1 The axioms and inference rules of the system Cinofor core linear logic are given 
below. 

Axioms: 

At- A 
i- I _Li- 
Ti-A,l 0,ri-A 



Cut Rule: 



Multiplicative Rules: 



Ti-A,A A,Ai-@ 

(cut) 

T,Ai- A,0 



A,B,Ft-A r i- A, A A t- Q,B 

(®:left) j a a /~\ a — ~~ f®: right) 



A®B,Ti-A r, A i- A, 0, A ® B 

A.Ti- A B.Ai-® Fi-A.A.B 

- L - 1 (fcleft) (fcright) 

A fl 5,r,Ai- A,0 H J Fi-A,A$B H 5 
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ri- A, A B, A i-0 A,Tt-A,B 

(— o: /eft) f— o: nV/i?) 

i ^)5,r,Ai-A,0 ri-A,A-o5 

Fi-A,A . A.Fi-A 

( L :left) - '— - , r x :"^ 



Additive Rules: 



a-l.ti-a ri-A,^- 1 
r i- a r i- a 

— — (Lfefl - f±:r« 
I, Ti- A Ti- A, ± 



ATi-A 5,ri-A 

f&:/e/?J f&:/e//J 



A&5,ri-A A&5,ri-A 
T i- A, A r i- A, B 

C&: n'g/if) 
re: feft 



r i- a, a & b 

A,Ti-A B,Ti-A 
A®BS*- A 



r i- a, a r i- a, b 

(@: right) (@: right) 



r*- a,a@b r a, a © 5 



The fragment of linear logic involving the formulae, axioms, and rules, containing only the 
multiplicative connectives ®, (J, L , I, and _L, is called multiplicative linear logic. 

From the above rules, it is clear (as in classical logic) that linear negation is involutive, 
i.e., both A i- A LL and A LL i- A are provable, and that both (A -o B) i- (A L (J B) and 
(A 1 - (J B) t- (A —o B) are provable. We also have the following "De Morgan" properties 
of linear negation over ®, (J on the one hand, and &, © on the other hand, namely that the 
following sequents are provable: 

U®5)- L i-A- L ||5- L > A 1 - B 5 X i- (A&B) 1 , 

(A 0 i- A 1 ' ® A- L ®5- L i-(A||5)- L > 

(A & i- A -1 © A- L e5- L i-(A&5)- L > 

(ileS) 1 i- A 1 - &B L , A L & B L i- (A® B) L . 

It is very easy to show that linear negation exchanges on the one hand I and _L, and on the 
other hand 1 and 0, formally expressed by the provability of the following sequents: 

I x i-J_, ±i- I ± , 
l x i-0, Oi-l^. 
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It is also useful to note that in writing sequents, the meaning of the comma (,) is overloaded. 
In a sequent A\,.. . , A m t- Bi , . . . , B n , on the lefthand side, the comma is an "uncommitted" 
®, but on the righthand side, the commma is an "uncommitted" (J. The difference between ® 
and & is illustrated by the fact that the sequents 

(A -o B) & (A -o C) i- (A -o (B & C)) and A -o B, A -o C i- {(A® A) -o (B®C)) 

are provable, but that the sequent A -o B, A -o C t- (A -o (B ® C)) is not provable. The 
additive connectives require resource sharing, but the multiplicative disallow it. 

Since contraction and weakening have been eliminated, core linear logic is not very 
expressive. In order to regain expressiveness, new formulae involving the exponentials ! (of 
course) and ? (why not) are introduced. Then, weakening and contraction are reintroduced, 
but in a controlled manner. The inference rules for the exponentials are given in the next 
definition. If T = A u .. . , A n , then T =\A U . . . , \A n , and T =1A U . . . , lA n . 

Definition 2 The rules for the exponentials are given below. 



A,Yi- A 
\A,Tt- A 

r i- a 

\A,Tt- A 

!r, A i-l A 



IT, 7A t- ?A 
\A, \A,Tt- A 



(dereliction: left) 

(weakening: left) 
(?: left) 



\A,Ti- A 



(contraction: left) 



Ti- A, A 
T i- A, 1A 

r i- a 

r i- a, ?a 

T i- A, ?A 

iri- ia, ?a 

r i- A, ?A, 1A 

r i- a, ?a 



(dereliction: right) 

(weakening: right) 
(!: right) 
(contraction: right) 



The system £m 0 ' ' for propositional linear logic is obtained from the system £mo by adding 
the inference rules of Definition 2. We can show easily that linear negation exchanges ! and ?, 
in the sense that the following sequents are provable: 

(\A) ± t-U ± ?A ± i-(!A) ± , 
(7 A) L ^\A L \A L i- (1A) L . 



Using (?: left), (!: right), (dereliction: left), and (dereliction: right), it is easy to show that ! 
and ? are idempotent, in the sense that the following sequents are provable: 

\\At-\A 

V.A t-lA ?Ah V.A. 
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The best way to understand linear negation is to think in terms of action and reaction, 
or {output, answer) and {input, question). Thus, an action of type A (answer of type A) 
corresponds to a reaction of type A 1 - (question of type A 1 - ). We can adopt the convention 
that an occurrence of a formula A on the lefthand side of a sequent T i- A corresponds to a 
reaction, or input (or question), and an occurrence of A on the righthand side of a sequent 
corresponds to an action, or output (or answer). Intuitiveley, the action \A has the meaning 
that an action of type A is reusable, or can be duplicated as many times as necessary. It also 
corresponds to the idea of storage. Dually, the action 1A has the meaning that the action of 
type A can be consumed as many times as necessary. It also corresponds to the idea of reading 
from memory. The intuitive meaning of the rule 

!r i- A, ?A 

(!: right) 

Ti- \A, ?A 

is more easily grasped if we consider its intuitionistic version 

Ti- A 

(!: right) 

\Ti-\A 



where A = 0. This rule says that since all inputs in IF are reusable, and A is an output 
consequence of \Y, then in fact, as many copies as needed of the action A can be output from 
!r. Thus, this corresponds to storing the action A in memory. Similarly, the intuitive meaning 
of the rule 

Fi-A,A 

{dereliction: right) 

is that the action of type 1A is read {retrieved) from memory, the intuitive meaning of 

r i- a 

{weakening: right) 



r i- a, ia 

is that the action of type 1A is erased, and the intuitive meaning of 

T i- A, ?A, 1A 



r i- a, ia 

is that the action of type 1A is duplicated. 



{contraction: right) 



It is possible to prove the following sequents, showing a form of distributivity of ! over & 
and ®, and of ? over © and (J. 



Lemma 1 The following sequents are provable 

\A © B) | IB 1A (J IB i- 1{A © B), 
\{A & B) i- \A ® IB \A ® IB i- \{A & B). 
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Remark: We can introduce a new connective, linear equivalence, denoted by the symbol 
o-o, and write the obvious inference rules for it. Alternatively, we can take the formula 
A o—o B as an abbreviation for (A -o B) & (B -o A). Then, for example, the provability 
of the two sequents 1(A © B) i- ?A (J W and ?A (J W i- %A © B) can be written as the 
provability of the formula \A © B) o-^ (?A (J W). 

In view of the fact that linear negation is an involution, it is possible to give a more concise 
description of linear logic if we restrict ourselves to right-sided sequents, that is, sequents of 
the form i- A. This is possible because the sequent A\,..., A m i- B\,...,B n is provable iff 
the sequent i- Af- , A^, B\,...,B n is provable. We can go further by taking advantage 
of the De Morgan properties noted earlier. Thus, we can write formulae in negation normal 
form, where negation is pushed in all the way so that it applies only to atomic formulae. In this 
formulation, negation is no longer a connective. We have positive literals of the form A where 
A is atomic, and negative literals of the form A 1 - where A is atomic. We construct formulae 
using the connectives ®, (J, &, ©, !, and ?, and we only need the contants _L and 1. We define 
A -o B as an abbrevation for A 1 - (J B, and the negation of a formula is defined inductively as 
follows: 



I x 


=-L, 




_L X 


= 1, 




1 X 


= o, 




O x 


= 1, 




(A) x 


= A\ 


for A 




-A, 


for A L 


(A ® B) L 


= A L 




(A B B) 1 - 


= A L 


®B L , 


(A & B) L 


= A L 


®B L , 


(A © B) L 


= A L 


&B L , 


(IA) 1 - 


= ?A X 


5 


(U) 1 - 


= !A X 





The inference rules are immediately rewritten for right-sided sequents. The only minor 
difference is that (!: right) is now written as 

i- 7T, A 

(!: right) 



T, \A 



2 Representing Intuitionistic Logic into Linear Logic 

It is possible to represent Intuitionistic Logic into Linear Logic via the following translation. 
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Definition 3 Given a formula A of propositional logic, its translation A 1 in linear logic is 
defined as follows: 



A 1 


= A 


when A is atomic. 


(A A By 


= A i < 


%B\ 


(A V By 


= \A { 


e \b\ 


(A d By 


= \A { 


-oB\ 


{-.Ay 


= \A { 


-o0, 


1} 


= 0. 





Given an intuitionistic sequent A\,..., A m 1- B, its translation is denned as the sequent 
\A\,..., \A l m 1- B % . This translation preserves intuitionistic provability and is conservative, 
as shown in the following lemma. 

Lemma 2 Given a sequent T \- C of intuitionistic logic, ifTt-C is provable in ^?' A ' V '" L , 
then its translation !P 1 C % is provable in linear logic Cin\ y Conversely, if the translation 
!P 1 C % of a sequent T 1- C is provable in linear logic Cin { y, then T 1- C is provable in 

,-0,A,V,_L 

Si 

Proof. One needs to show that the translated version of the axioms and the inference rules 
of ^?> A ' V '- L ^ provable in CiriQ, which is indeed the case. The point is that ! is added by 
the translation when necessary to allow weakening or contraction on the left, and this allows 
the simulation of the rules of ^?' A ' V '" L . The provability of the sequent \(A -o B) 1- \A -o\B 
is also needed. For the converse, there is a difficulty with the constant 0. If we consider the 
fragment not involving 0, we need to know that the cut elimination theorem holds for £m 0 ' ', 
which was proved by Girard [7] (see also Lincoln, Mitchell, Scedrov, and Shankar [8]), and 
we simply need to observe that a cut-free proof of an intuitionistic sequent over -o, &, ©, 
and !, only involves intuitionistic sequents. Thus, such a proof yields an intuitionistic proof if 
we erase ! and replace the additive connectives by the standard connectives D, A, V. A more 
complex argument is needed in order to handle 0 (see Schellinx [1 1]). □ 

Classical logic can also be represented in linear logic. 



3 Representing Classical Logic into Linear Logic 

Given a classical sequent Ai , . . . , A m 1- B\ , . . . , B n , we will consider that the occurrences 
of B\ , . . . , B n are positive, and that the occurrences ofA\,..., A m are negative. Consequently, 
the translation makes use of signed formulae of the form pA and nA. Given T = A\, .. . , A m , 
thenpr = pA[, . . . ,pA m , and nr = nA\, . . . , nA m . 
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Definition 4 Given a formula A of propositional logic, its translations pA c andnA c in linear 
logic are defined as follows: 



P A C = nA c 


= A when A is atomic, 


(p^A) c 


= (nA c ) ± , 


(n-nA) c 




(pA A B) c 


= lpA c & ?pB c , 


(nA A B) c 


= nA c &nB c , 


(pA V B) c 


= P A c @pB c , 


{nA V B) c 


= \nA c © lnB c , 


(pA d B) c 


= (nA c )^@pB c , 


{nA d BY 


= \(pA c )^ © \nB c . 



Given a classical sequent T i- A, its translation is denned as the sequent !nr c i-?pA c , where 
nT c = nA\, ... , nA c m if Y = A\, . . . , A m , and similarly for pA c . This translation preserves 
classical provability and is conservative, as shown in the following lemma. 

Lemma 3 Given a sequent T i- A of classical logic, ifTt-A is provable in &? ,A,V, ~', then 
its translation \nT c i-?pA c is provable in linear logic Cin^ '. Conversely, if the translation 
!nr c i-?pA c of a sequent T i- A is provable in linear logic Cin { y, then T i- A is provable in 

(p,A,V,-i 

Proof. One needs to show that the translated version of the axioms and the inference rules 
of £,? ,A,V, ~' are provable in Cin^, which is indeed the case. The point is that ! and ? are 
added by the translation when necessary to allow weakening or contraction, and this allows 
the simulation of the rules of £ ( ?' A ' V '~'. We also use the equivalences 1(A © B) c^o (1A (J IB) 
and l(A & B) m (\A ® \B). 

For the converse, we need the fact that the cut elimination theorem holds for Cin { y, which 
was proved by Girard [7] (see also Lincoln, Mitchell, Scedrov, and Shankar [8]). Then, we 
simply observe that a cut-free proof of the translation of a classical sequent only involves 
translations of classical sequents. Thus, such a proof yields a classical proof if we erase the 
connectives ! and ?, and replace the additive connectives and - 1 by the standard connectives D , 
A, V, -i (it is also necessary to simulate (©: right) and (&: left) with the rules of £,? ,A,V, ~', but 
this is standard). □ 

Remark: The above proof shows that the following translation for pA A B, nA V B, and 
nA D B, also works: 

(pA A B) c = ?pA c ® ? P B C , 
(nA V B) c = \nA c (J \nB c , 
(nA d B) c = lpA c -o \nB c . 
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We now consider one of the possible semantics for linear logic, "phase semantics". 

4 Closure Operations, Galois Connections, Adjunctions 

Phase semantics due to Girard [7] is an algebraic semantics for linear logic. Actually, 
this semantics turns out to be an instance of a well known concept of lattice theory (Galois 
connections). We believe that phase semantics can be understood better if it is presented 
explicitly in terms of a Galois connection. Thus, we will begin by reviewing some basic 
notions of lattice theory, the notion of closure operation and the notion of Galois connection 
(see Birkhoff [3]). The relationship between phase semantics and Galois connections has been 
noted by Avron [2]. 

Definition 5 Let I be a set. A function t : 2 1 — > 2 1 is a closure operation on 2 1 iff the following 
properties hold: For all X,Y C I, 

(1) x c x\- 

(2) X^ C X f ; 

(3) X CY implies X f C 

From (1) and (2), it is clear that X^ = XK A set X is called closed iff X^ = X . It is clear 
that X is closed iff X = Y^ for some Y. The set of closed subsets of / is denoted as jt. 

Observe that the set jt of closed subsets of I is closed under arbitrary intersections. 
Given a family (Aj)j G j of closed sets in jt, since f]j e j{Aj} C Aj for every j e J, by 
monotonicity (property (3) in Definition 5), we have (f]j € j{Aj})^ ^ ^\ f° r every j e J, 
which is equivalent to (f| je j{Aj})^ C Aj, since A 1 - = Aj for every j e J because the Aj are 
closed subsets. Thus, (f[ je j{Aj}^ C (\ jsJ {Aj}. The inclusion (\ jsJ {Aj} C (f[ je j{Aj}^ 
follows from condition (1). 

Remark: If we drop condition (3) of Definition 5 and add the two conditions: 

(0) 0 f = 0, and 

(3') (AUB)* = ^ u£t, 

then we obtain one of the possible definitions of a topology (the Kuratowski closure axioms). 
Indeed, we can define the family of open sets of the topology as the complements of the closed 
subsets of /. One can also verify easily that (3') implies (3). 

The set P of closed subsets of / can be naturally given the structure of a complete lattice. 
For the (easy) proof, see Birkhoff [3]. 
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Theorem 1 Given a set I and a closure operation t on 2 1 , if we define the operations V and 
/\ on the set P of closed subsets of I by 

A{^}= riMi>. VMi> = (UMi» t . 

jeJ jeJ jsJ jsJ 

then P is a complete lattice under inclusion. 

If * is a closure operation which is injective on singleton sets {i.e., {x}^ ^ whenever 
x ^ y), then the mapping x i— > {x}^ is a natural embedding of I into the complete 
lattice of closed subsets. If I is equiped with a binary operation, say •, then we define 
XY = {x » y \ x g X, y e Y}, and we extend • to the complete lattice P by defining 

i.y = (iy)t. 

A way to define closure operations is via Galois connections. 

Definition 6 Let I and J be two sets and R be a binary relation on I x J. Given any two 
subsets X C I and Y C J, we define (with a slight ambiguity of notation) the sets X* C J 
and Y + C I as follows: 

X* = {y e J | Va; e X, xRy}, 
Y + = {x e I | Vp g Y, xRy}. 

We have the following lemma showing that *+ is a closure operation on 2 1 , and that +* is a 
closure operation on 2 J . The proof can be found in Birkhoff [3]. 

Lemma 4 Given a binary relation R on I X J, the following properties hold: For all 
X,X' CIandY,Y' C J, 

(1) X C X' implies X'* C X* a«J imp/iej Y ,+ C y + ; 

(2 j x c y c y + *, = x*, y + * + = y + ; 

(3) *+ and+* are closure operations on 2 1 and2 J respectively. Furthermore, the mappings 
X i— > X* and Y i— > Y + define a dual isomorphism 1 between the complete lattices of closed 
subsets of I and J. 

The dual isomorphisms I h I* and Y i— > Y + are called polarities, and they are said to 
define a Galois connection between I and J. 

In particular, if < is a partial order on I = J, by taking R - <, then t = *+ is a closure 
operation. Note that for X C I, X* is the set of upper bounds of X, denoted as upper(X), 

'A dual isomorphism h between posets is a bijection which is anti-monotonic, i.e., a < b implies h(b) < h(a). 
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X + is the set of lower bounds of X, denoted as lower(X), X* + - lower(upper(X)), and 
{a:}t - {a:}* + = {y \ y < x} (the principal ideal generated by x). The natural mapping 
x i— > {a:}* + is an embedding of (7, <) into the complete lattice of closed subsets of 7, and this 
embedding preserves all existings least upper bounds and greatest lower bounds (in fact, 7 is 
dense in this lattice). It is also called the "Mac Neille completion", or "completion by cuts". 
Furthermore, if ~ is an involution on 7, that is, x = ~~ x, and x < y implies ~ y < ~ x for 
all x , y g 7, then we can extend ~ to 7^ by defining 

~X = {~y\y g X*}. 

It is easily verified that we get an involution. 

A particularly interesting case arises when I - J and R is symmetric. In this case, * = +, 
and the closure operation is t = **. Also, the operation on the set 7* = I** of closed subsets 
defined by X i— > X* is an involution with some nice properties. We define I - 0* - I, and 
0 = 7* = 0**. It is immediately verified that 1 is the greatest element of 7**, and that 0 is its 
least element. 

Lemma 5 Given a symmetric relation R on a set I, for any family (Aj)j e j of closed sets in 
jt - we nave 

3 e J j^J 

(f]{ A j}y-([J{ A *j}r, 

(AM;»*= VMJ>. 

3 e J j^J 

3 e J j^J 

Proof. We have 

ae(|J{4*}r iff 

3^J 

\fb(b g ( |J {A,}) d aitt), iff 

3^J 

Vb(3j e J (6 e A,) D aiZ6), iff 
Vj g J V6(6 g A,- d aiZ6), iff 
Vj g J (a g Ap, iff 

a G fl {^}. 

Since the Aj are closed we have A*-* = Aj, and the second identity follows from the first by 
applying * to both sides, and replacing each Aj by A*-. Since by definition, 

/\{A j }=f\{A j }, \/{A j } = ([j{A j }r, 

jsJ jsJ jsJ jeJ 
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the last two identities follow from the first two and the fact that X*** = X*. □ 



If R is irrefiexive, that is, Va; e I->(xRx), then X A X* = 0 and X V X* = I. Indeed, 
a e X n X* implies aRa, which shows that X A X* = 0. The other equality follows by 
duality. If R is symmetric and we also have a binary operation • on /, we can extend • to I** 
by defining X . Y = {XYf* . We also define || by X \\ Y = (X* . Y*)* = (X*Y*)*. We can 
immediately verify that X • Y = (X* \\ Y*)*. We have the following useful properties. 

Lemma 6 Given a symmetric relation R on a set I and a binary operation • on I, then for 
any family (Aj)j G j of closed sets in 1^ = I** and any B e l\ we have 

V {Uj • B)} = (( (J {A^B)**, ( \/ {A;}) . B = (( (J {A^rS)**, 

jeJ jeJ jeJ jeJ 

A {(^- II *)} - (( U WW)*, ( A M;» II B = (( U M;>r*T. 

jeJ jeJ jeJ jeJ 



Proo/. Using the fact that X \\ Y = (X*Y*)* and that A j€ j{Aj} = f] je j{Aj}, we have 

a g A «4* II 5 )> iff 
a g f| {(Aj || 5)}, iff 

a g f| {(^5*)*}, iff 

Vj e J (a e (^5*)*), iff 

Vj e J V6(6 e ^5* d aitt), iff 

V6(3j g J(6 g ^5*) d aito), iff 

V6(6 g ( |J {A]})B* d aitt), iff 

a g ((|J{^})5*)*. 

On the other hand, 

a G (A {4*}) II 5 iff 

as ((f) {A^TB*)*, iff 

a G ((IjMj})** 5 *)*- 

Using the fact that X . y = (X* || y*)* and that (A je j{Aj})* = V,- e j{^} by Lemma 5, the 
first equality follows from the third, and the second one follows by unwinding the definitions 
X.Y = (XY)** and V je j{4*} = (U je • □ 
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In general, we only have the inclusions 

V {(Aj . 77)} C ( \/ {Aj}) -B, ( /\ {A;}) || 5 C /\ {(A, || 5)}. 

jeJ jeJ jeJ jeJ 

Equality holds when R has additional properties. For example, this is the case when pRq • r 
holds iff p • gifr holds. For this, we need the following lemma which will also be useful later. 

Lemma 7 If the relation R is symmetric andpRq • r holds iffp • qRr holds, then 
p G (X . FT # \fq(q £ XDp.qzY). 

Proof. By the definitions, p e (X . Y*)* iffp e (17*)* iff \fu(u e 17* D p£u), iff 
Vu(3q3r(q G lAr g Y* A u - q » r) D pRu) , 

iff 

Vu(3g3r-(g g X A Vi(i g Y D r-Ttt) A « = g . r) D p.Ru) , 

iff 

VuVgVr- ((g g X A Vi(i g 7 D r-Ttt) A « = q . r)) D pRuj , 

iff 

VgVr-((g g X A Vt(t G 7 D r-Ttt)) D p£g • r). 

Now assume that there is some <? such that q & X but p • <? G 7. Letting f = p • <? in the 
above formula, (t e 7 D rift) is trivially false, and thus, we have 

\fr(pRq • r). 

However, by the hypothesis, pRq • r holds iff p • gifr holds, and so Vr(p • qRr) holds, that 
is, p • q g 7* = 0. But we know that 0 is the smallest element of 7**, and so 0 C Y, which 
implies thatp • q g Y, contradicting the assumption p • q G Y. Thus, we have shown that 
if p g (X • Y*)* then Vq(q g X D pRq g Y). The converse it easier to show. For every q 
and r, if we assume that 

(q <£ X D p » q £ Y) and (gelA Vt(t e 7 D rRt)) , 

then by letting t = p • we get riip • which is equivalent to pRq • r, by symmetry of R 
and the fact that pRq • r holds iff p • gifr holds. □ 

Note that (X • 7*)* can be taken as the semantic definition of X -o Y, since in 
linear logic, X -o Y is equivalent to X" 1 J 7. Thus, the fact that p e (X . 7*)* iff 
V<7(<7 gXUp^^gF) should not be a total surprise to those who know about Kripke 
semantics. 
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Lemma 8 If the relation R is symmetric, • has an identity 1, and pRq • r holds iff p • qRr 
holds, then for any family (Aj)j e j of closed sets in P = I** and any B e l\ we have 

B\\ (A = A « B II 4*)}, B . ( \/ {Aj}) =\/{(B. Aj)}, 

jsJ jsJ jsJ jsJ 

5||1 = 1, 5.0 = 0. 

Proof. By Lemma 7, p e (17*)* iff Vg(g e X D p . g e y). Since X || y = (X*y*)*, 
p G 5||(A{^}) iff 
pzB\\(f){Aj}), iff 

Vg(g e 5*Dp.ge (p|{A;})), iff 

Vg(g e 5* d Vj e J(p . g e Aj)), iff 
Vj e J Vg(g e 5* D p . g e A,-), iff 
Vj e J(p e (5*Ap*), iff 
V,- e J(p e (5 || A,-)), iff 
p e f| {(5 || Aj)}, iff 

p e /\{(B || A,-)}. 

The special case where J = 0 is handled easily, and yields B || 1 = 1 and 5.0=0. The 
other equality follows from duality. □ 

One should note that an argument symmetric to the one used in Lemma 7 shows that 
p e (X*Y)* iff Vg(g e y D g • p e X). Therefore, under the hypotheses of Lemma 8, we 
also obtain the following identities, without appealing to the commutativity of •: 

( A {Aj}) || B = A {(Aj || B)}, ( V {Aj}) . B = V {(A; . 5)}. 



Another important concept is that of an adjunction. The concept of adjunction is central in 
category theory (see MacLane [9]), but for our purposes, we only need to define it for partially 
ordered sets. 

Definition 7 Given two partially ordered sets (A, <) and (B, <), for any two monotonic 
functions f: A — > B and g: B — > A, f is a left adjoint to g (and g is a right adjoint to f) iff for 
all x e A, y e B, 

f(x) <y iff x < g(y). 
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First, observe that if a function / has a right adjoint g, then it must be unique, even if / and 
g are not monotonic. 

Lemma 9 If f has a right adjoint g, then g is unique, even if f and g are not monotonic. 
Furthermore, g(y) is the greatest element of the set {x e A \ f(x) < y}, and f(x) is the least 
element of the set {y e B \ x < g(y)}. 

Proof Since f(x) <yiffx< g(y), for x = g(y), we get f(g(y)) < y iff g(y) < g(y). Since 
< is reflexive, g{y) < g(y) always holds, and thus f(g(y)) < y for all y e B. Now, assume 
that g\ and 172 are two right adjoints of /. Since 172 is a right adjoint of /, f(x) < y iff x < (72(2/)- 
In particular, for x = gi(y), f(gi(y)) < y iff gi(y) < giiy)- But since g\ is also a right adjoint 
of /, we know that f(g\(y)) < y for all y e B, and thus gi(y) < giiy) for all y g B. The 
argument being symmetric, we also have g^iy) < gi(y) for all y g B, and by antisymmetry 
of <, we have gi(y) = #2(2/) for all y g B. Consider the set {x g A \ f(x) < y}. Since 
f(9(y)) < y for all y g B, we have g(y) g {x g A \ f(x) < y}. If f(x) < y, since g is a right 
adjoint of /, then x < g(y), and thus g(y) is an upper bound for the set {x g A \ f(x) < y}. 
Since g(y) also belongs to this set, it is its greatest element. The case of f(x) is treated in a 
similar fashion. □ 

Other properties of adjoints are given in the next lemma. 

Lemma 10 ( i) Two monotonic functions f: A — > B and g: B — > A are adjoints ifff(g(y)) < y 
andx < g(f(x)) for ally G B, x g A. (ii) When f and g are adjoints, then f = fgf, g = gfg, 
and f and g restrict to bijections between {a g A \ a = g(f(a))} and {b g B \ b = f(g(b))}. 

Proof, (i) We have already shown in Lemma 9 that if / and g are adjoints, then f(g(y)) < y 
for all y g B and x < g(f(x)) for all x g A. Conversely, if we assume that f(x) < y, by 
monotonicity of g, we have g(f(x)) < g(y), and since x < g(f(x)) holds, we get x < g(y). 
If we assume that x < g(y), then by monotonicity of /, we have f(x) < f(g(y)), and since 
f(9(y)) < y holds, we get f(x) < y. Thus, / and g are adjoints. (ii) Since x < g(f(x)) holds, 
by monotonicity of /, we have f(x) < f(g(f(x))). Since f(g(y)) < y holds for all y, then 
f(9(f( x ))) < f( x )- By antisymmetry, we get f(x) = f(g(f(x))) for all x g A. The proof of 
the other identity is similar, and the last part of (ii) follows easily. □ 

Another crucial property of left adjoints is that they preserve all existing lubs of A. 

Lemma 11 If two monotonic functions f:A^>B and g: B — > A are adjoints, then f 
preserves all lubs existing in A, and g preserves all gibs existing in B. 

Proof. Assume that S C A and that V S exists. By monotonicity of /, we have 
f(x) < /(V S) for all x g S , and thus V{/0) I * e S} < /(V S). On the other hand, if 
f(x) < b for all x g S, since / and g are adjoints, we have x < g(b) for all x g S, and thus 
y S < g(b). Using once again the fact that / and g are adjoints, we have /(V S) < b, which 
shows that /(V S) = \/{f(x) \ x g S}. The argument for g is symmetric. □ 
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Lemma 1 1 gives a necessary condition for the existence of adjoints. By Lemma 9, the value 
of g(y) is the greatest element of the set {x e A \ f(x) < y}. Thus, if all lubs exist in A and / 
preserves all lubs, it seems likely that its right adjoint g exists. This fundamental fact is indeed 
true. In the case of (nondegenerate) categories, this fundamental theorem due to Peter Freyd 
is known as the "Adjoint Functor Theorem". The proof of the general theorem involves a 
technical condition know as the "solution set condition", but fortunately, in the case of posets, 
this condition is always satisfied (see MacLane [9]). 

Lemma 12 (Adjoint Functor Theorem, after Freyd) Let (A, <) and (B, <) be two partially 
ordered sets, and f : A — > B a monotonic function. If all lubs exist in A and f preserves all 
lubs, then f has a right adjoint g: B — > A given by g(y) = \J{z e A \ f(z) < y}. 

Proof. We know from Lemma 9 that g(y) -\J{z e A \ f(z) < y} is the only possible 
candidate. It is immediately verified that such a g is monotonic. Since / preserves existing 
lubs, we have 

f(9(y)) = f(\/{* g A | f(z) < y}) = \/{f(z) e A | f(z) <y}<y. 

By the definition of g(y), we also have g(f(x)) = \J{z e A \ f(z) < f(x)} > x. Thus, 
f(9(y)) < V an d x < g(f(x)) for all y e B, x e A, which by Lemma 10 shows that / and g 
are adjoints. □ 

The notion of adjunction yields an interesting generalization of the concept of Galois 
connection that we now describe. First, we consider the concept of a closure operation in an 
arbitrary partially ordered set. 

Definition 8 Let (A, <) be a partially ordered set. A function t : A — > A is a closure operation 
on A iff the following properties hold: For all X,Y e A, 

(1) X < x\- 

(2) X^ < X f ; 

(3) X < Y implies X f < Y\ 

Note that Definition 5 corresponds to the special case where the poset A is some power set 
2 1 and the partial order is inclusion. Recalling that a binary relation R on / x J induces two 
functions *: 2 1 — > 2 J and +: 2 J — > 2 1 satisfying the properties of Lemma 4, we can define a 
Galois connection between two posets (A, <) and (B, <) as a pair (*,+) of functions such 
that *: A — > B and +: B — > A are order-reversing and such that X < X* + and Y < Y + * for all 
X & A and Y e B. But then, in view of Lemma 10, this is almost equivalent to saying that 
* and + are adjoints. The reason this is not exactly correct is that * and + are order-reversing 
rather than being order-preserving, and the inequality Y < Y + * is in the wrong direction. We 
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can fix this problem easily. Given any poset (A, <), we define the dual poset {A op , < op ) such 
that A°p = A and x < op y iff y < x. Then, *: A B op and +: 5 op A are monotonic and 
X < X* + and Y < Y + * express that they are adjoints. Thus, we are led to the following 
definition (see Birkhoff [3] and MacLane [9]). 

Definition 9 Given two posets (A, <) and {B, <}, two monotonic functions *: A — > B op and 
+: B op — > A form a Galois connection between A and Biff* is a left adjoint to +, that is, for 
MX e A,Y e 5, 

X* > y iff X < Y + . 

The following generalization of Lemma 4 is immediate. 

Lemma 13 Given a Galois connection (*, +) between two posets A and B, for all X g A 
and Y e B, the following properties hold: 

(1) x < x* + , y < y + *, x* + * = x*, y + * + = y + ; 

(2) *+ and +* are closure operations on A and B respectively. 

We can now apply the above considerations to the definition of the phase semantics. We 
begin with core linear logic. 

5 Phase Semantics 

We first define core Girard structures. These structures consist of a carrier equipped 
with two overlapping algebraic structures: a (commutative) monoid structure to interpret the 
multiplicatives, and a lattice structure to interpret the additives. Similar structures have been 
considred by Avron [2], 

Definition 10 A core Girard structure is a quintuple D = (D, <, •, 1, ~), satisfying the 
following conditions: 

(1) {D,<) is a complete lattice; 

(2) ~ is an involution on D; 

(3) (D, 1) is a commutative monoid with identity 1; 

(4) The monoid operation • is monotonic in each of its arguments, i.e., if a < a' and b < V, 
then a • b < a' • b'. 
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(5) Defining || such that a \\ b = ~ (~ a »~ b), we have 
a • b < c iff a < ~ b \\ c. 

We can prove easily that the condition a • b < c iff a < ~ b \\ c, is equivalent to the 
condition a < b iff 1 < ~ a \\ b. Indeed, assuming that a • b < c iff a < ~ b \\ c holds, using 
the fact that 1 is an identity for •, setting a = 1, we obtain 6 < c iff 1 < ~ 6 || c. Conversely, 
assuming that a<6iffl<~a||6 holds, we have a • b < c iff 1 < ~ (a • b) \\ c, that is 
a • b < c iff 1 < (~ a ||~ b) \\ c. Since || is associative, this is equivalent to a • b < c iff 
1 < ~ a || (~ b || c). But we also have a < ~ b \\ c iff 1 < ~ a \\ (~ b \\ c), and thus a • b < c 
iff a < ~ b || c. 

Letting 0 = ~ 1 , the condition a • b < c iff a<~6||c is also equivalent to the condition 
a < b iff a »~ b < 0. This follows immediately from the fact that ~ is an involution. 

A core Girard prestructure is a core Girard structure where D is a lattice (not necessarily 
complete) having a greatest element denoted as 1 and a least element denoted as 0, where • is 
mono tonic in each of its arguments. 

In a core Girard structure, it is immediately verified that 0 is an identity for 1 1 , and that 

~(AW)= V 

~(VW)= A{~*j}- 

What is more interesting is the fact that • preserves arbitrary least upper bounds. This 
follows from the fact that a i-> a • b is a left adjoint of a i->~ b \\ a. 

Lemma 14 Given a Girard structure D = (D ,<,»,\, ~), for every family (aj)j e j of elements 
of D, for every b e D, we have 

( V K» • 6 = V {(«; • 6 • ( V K» = V {(* • «;)}; 

In particular, corresponding to the case J -0, we have 0 • 6 = 6 • 0 = 0. 

Proof. First, we note that 1 = ~ 0 || 0, the greatest element of D. Since 0 is the least 
element of D, for every a e D we have 0 < ~ a \\ 0. But 0 < ~ a \\ 0 iff 0 • a < 0, iff 
a • 0 < 0 (since • is commutative), iff a < ~ 0 || 0. Thus, 1 = ~ 0 || 0. As a consequence, 
a • 0 = 0, since a • 0 < 0 iff a < ~ 0 || 0 = 1, and 0 is the least element of D. Note that 
conditions (2) and (4) imply that a \-> a • b and a i->~ b \\ a are monotonic (for any b), and 
condition (5) implies that they are adjoint. Thus, by Lemma 11, a i-> a • b preserves least 
upper bounds. The other identities follow by commutativity of .. □ 
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In fact, it is possible to define an intuitionistic version of Girard structures which is 
interesting in its own right. Such structures were investigated by Abrusci [1], Ono [10], and 
Troelstra [12]. 

Definition 11 A core intuitionistic Girard structure is a tuple D - (D, <, •, 1, 0, -o, ~), 

satisfying the following conditions: 

(1) {D,<) is a complete lattice with least element 0 and greatest element 1; 

(2) ~ a = a — o 0, for every a e D (where 0 is a distinguished element of D); 

(3) (D, • , 1) is a commutative monoid with identity element 1; 

(4) if a < a' and b < V, then a • b < a' • V and a' —o b < a —o b'; 

(5) a • b < c iff a < b — o c. 

A core intuitionistic Girard structure is classical iff a = ~~ a for all a e D. It will 
be shown below that core Girard structures as defined in Definition 10 and classical core 
intuitionistic Girard structures are equivalent. We also have the following properties. 

Lemma 1 5 The following properties hold for core intuitionistic Girard structures. 

(i) 1 = 0 -o 0 is the greatest element of D; 

(ii) For every family (a j)j € j of elements of D, for every b e D, we have 

( V K» • b - V {(«; • b • ( V K» = V W • «;)}; 

jsJ jsJ jsJ jsJ 

In particular, corresponding to the case J -0, we have 0»b-b»0-0. 

( Hi) a — o (b — o c) = (a • b) — o c; 

(iv) For a classical structure, a -o b = ~ (a «~ 6), 0 = ~ 1, a«<i a V 6 = ~ (~ a A ~ 6). 

Proof, (i) Since a • 6 < c iff a < 6 — o c and 0 is the least element of D, we have for every 
a g D, 0 < a -o 0, iff 0 . a < 0, iff a . 0 < 0 (by commutativity of .), iff a < 0 -o 0. 
Thus, 1 = 0 -o 0. (ii) Note that condition (4) of Definition 1 1 expresses that •: D x D — > D 
and — o: D op x D — > D are monotonic (where D op is equipped with the order < op such that 
x < op y iff y < a:), and that (5) says that a; i-> a; • y is left adjoint to x i-> y -° By Lemma 
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1 1, x i-> x • y preserves least upper bounds. The other identities follow by commutativity of 
• . (iii) u < a — o (b — o c) iff u • a < b — o c iff u • a • b < c iff u < (a • b) — o c. (iv) 

~ (a »~ b) = (a »~ 6) — o 0 

= a — o (~ b — o 0) (by (iii)) 

- a —o (~~ 6) since ~ a; = a; — o 0 

= a — o b since b = ~~ b. 

In particular, ~ 1 = 1 -o 0 = ~ (1 »~ 0) = ~~ 0=0, and thus 0 = ~ 1. From condition 
(4) of Definition 11, x < y implies that ~ y < ~ x. Since we also have ~~ x = x, ~ is an 
involution, and aV6 = ~(~aA~6) follows. □ 

One can also show as an easy exercise that condition (4) of Definition 1 1 can be replaced by 
the identity 

a • (b V c) = (a • b) V (a • c). 

We observed in the proof of Lemma 15 that •: D x D — > D and — o: D op x D — > D are 
monotonic, and that (5) says that a; i-> a; • y is left adjoint to 2 h y -o i, It is possible to 
develop categorical semantics for linear logic inspired by these observations. We now return 
to (classical) core linear logic. 

We can interpret formulae of core linear logic as follows. Given any mapping v, called 
a valuation, assigning some element v(P) e D to every atomic symbol P, we extend v to 
formulae inductively as follows: 

Definition 1 2 Given a core Girard (pre)structure D, a valuation v is extended to formulae as 
follows: 



v(l) 


= 1, 


v(±) 


= o, 


v(l) 




v(fi) 


= 0, 


v{A L ) 


= ~ v(A), 


v(A ® B) 


= v(A) . v(B), 


v(A B B) 


= v(A) || v(B), 


v(A & B) 


= v(A) A v(B), 


v(A © B) 


= v(A) V v(B), 



where A and V are the lattice operations on D. Note that the fact that D is complete is not 
needed for this definition to make sense, just the existence of a least and a greatest element. 

Given a sequent T i- A where T - Ay, ... , A m and A = B\ , . . . , B n , we define 
v(F i- A) = ~ v(A{) || • • • ||~ v(A m ) || v(Bi) \\ ■ ■ ■ \\ v(B n ). 
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The set Tjy = {a e D | 1 < a} is called a truth subset of D. Given a sequent T i- A, we say 
that v satisfies F t- A in D iff v(F t- A) e Tp, i.e., 1 < v(T i- A). KF = A\,..., A m and 
A = B\ , . . . , B n , then 1 < v(F i- A) is equivalent to 

v(A l ).....v(A m )<v(B l )\\ ■■■\\v(B n ), 

or to 

v{A x ) ..... t;(A m ) .~ . . . . < 0. 

In the special case m = 0, the condition 1 < v(i- A) is equivalent to 

1 < v(Bi) || • • • || «(5 n ), 

and in the special case n = 0, the condition 1 < v(F i-) is equivalent to 

v{A x ). ....v{A m ) < 0. 

The condition 1 < v(F i- A) is also denoted as D (=(Ti- A)[v]. We say that r i- A is valid 
in D, denoted as D |= F t- A, iff D |= (r i- A)[v] for every v, and finally we say that T i- A is 
universally valid, denoted as |= F t- A, iff D |= F t- A for all D. If we consider sequents of 
the special form i- A where A is a formula, we obtain the notion of satisfaction, validity, and 
universal vality, for formulae. A universal formula is also called a linear tautology. 



The soundness of the interpretation defined above is easily shown. 



Lemma 1 6 IfF i A is provable in linear logic, then for every core Girard (pre)structure D 
and every valuation v, D |= (r i- A)[v]. As a corollary, F t- A is valid. 



Proof. The verification proceeds by induction on proof trees. It amounts to checking the 
soundness of the axioms and of the proof rules. We check only a few cases, as the verification 
is straightforward. Consider the rule 

Fi-A,A A i- 0,5 

(®: right) 

r,Ai- A, ®,A®B 

Thus, we can assume that 1 < v(F i- A, A) and 1 < v(A i- 0, B). By (5) and Definition 12, 
this is equivalent to 

v(F) . viA- 1 ) < v(A), and v(A) . vi®- 1 ) < v(B), 

where v(F) = v(A\) ..... v(A m ) if F = A\, . . . , A m , and i^A- 1 ) = ~ v(B[) • . . . .~ v(B n ) if 
A = B\ , . . . , B n . By monotonicity of ., we have 

v(F) . v(A) . viA- 1 ) . vi®- 1 ) < v(A) . v(B), 

that is 

v(F, A) . viA 1 - , 0" 1 ) < v(A ® B), 
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which means that 

1 < d(T,Ai- A,®,A®B). 

Consider the rule 

A,B,Ti- A 

— — (®: left) 

A®B,Fi-A 

By hypothesis, 1 < v(A, B,Fi- A). By (5), this is equivalent to 

v(A) . v(B) . v(V) . viA- 1 ) < 0, 

that is 

v(A ® 5) . v(F) . ^(A- 1 ) < 0, 

which means that 

1 < v(A ® B,Fi- A). 

Consider the cut rule 

ri- A, A A,Ai-® 

(cut) 

r,Ai-A,@ 

By assumption, we have 1 < v(T t- A, A) and 1 < v(A, A t- 0). By (5) and Definition 12, 
this is equivalent to 

v(F) . v(A L ) < v(A), and v(A) . vi®- 1 ) < ~ v(A). 

By monotonicity of •, we have 

v(F) . v(A) . viA- 1 ) . vi®- 1 ) < v(A) .~ 

However, from a < a, we have a «~ a < 0, and so 

t;(r) . v(A) . ^(A- 1 ) . ^(Q- 1 ) < 0, 

that is 

v(T,A).v(A ± ,® ± ) < 0, 

which means that 

1 < v(F,At- A,®). 

The case of the additives follows from the fact that A corresponds to greatest lower bound and 
V corresponds to least upper bound. □ 

Note that the fact that D is complete is not used anywhere in the proof. We now turn to 
Girard's phase structures [7], and show their equivalence with core Girard structures. 

Definition 1 3 A phase structure P is a quadruple (P, •, 1, _L), where 

(1) {P, •, 1) is a commutative monoid with identity 1; 

(2) _L is a distinguished subset of P, the set of antiphases. 
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The set P is called the set of phases. 

Definition 1 4 Given a phase structure P, for any subset X of P, its dual X 1 - is defined by 

X 1 - = {p G P | Vg e X, p . q G _L}. 

A subset X of P such that X = X" 11 - w called a fact. Observe that _L= {l} -1 . We define 
l=± ± ={l} ±± ,l = 0 ± = P,andO=l ± . 

We can now establish the connection with closure operations. Given a phase structure P, if 
we define the binary relation R on P such that 

xRy iff x • y g _L, 

then we have a Galois connection such that 

X* = X + = {p G P | \fq G X, p . g G _L} = X- 1 , 

and by Lemma 4, Ih X" 11 - is a closure operation. By Theorem 1, the set of facts, i.e., the 
set pt of closed subsets of P, is a complete lattice. It is immediately verified that 1 = P is the 
greatest element of P* , and that 0 is its least element. The operation • can be extended to P* 
and we can define an involution ~ on P* by setting 

X ® Y = (XY)^ , ~X = X" L . 

It should be noted that in order for - 1 to be an involution, that is, to have X* = X + = X- 1 , it 
is not actually required that • be commutative. What we need is that R be symmetric, which 
holds iff _L satisfies the following property: 

a:»2/G_L iff y • x G _L . 

Abrusci [1] calls such a _L cyclic. Obviously, _L is cyclic when • is commutative. When _L 
is cyclic but • is not commutative, Abrusci calls the corresponding structure a cyclic classical 
phase space [1] (as opposed to a commutative classical phase space). We have not found yet 
situations where the more general condition of cyclicity of _L is preferable to the commutativity 
of Thus, from now on, we assume • to be commutative. However, noncommutative phase 
spaces are interesting since they lead to noncommutative linear logic, investigated by Absrusci 
(among others). 

When • is commutative, it is immediately verified that (P*, ®, I) is a commutative monoid 
with I as its identity. If we define X (J Y = (X 1 - ® Y 1 ) 1 - = (X^Y^, then we also have a 
monoid structure (pt, (J, _L) with _L as its identity. The lattice operations on P* are defined as 
in Theorem 1, but it will be convenient to regroup all these definitions: 

X ® Y = (XY) 11 , X (J Y = (X L Y L ) L , 
X AY =X HY, IVY^IUY) 11 . 

Thus, Pt is practically a core Girard structure. For this, we need a lemma. 
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Lemma 17 Given a phase structure P, the following properties hold: (1) For any two facts 
X, Y C P, we have X C Y iff X ® Y 1 - C _L (2) the operation ® is monotonic in each 
argument (in fact, ® preserves arbitrary least upper bounds). 

Proof. In order to prove (1), we first apply Lemma 7 to the relation R denned such that 
xRy iff x • y e _L. Therefore, we have p e (X ® y- 1 ) 1 - iff Vg(g e X D p • <7 e y). 

In view of the above equivalence, p e X ® y 1 - iff p e (X ® y- 1 )- 1 - 1 - iff 

\/q(q e (X®^)^ Dp.?el), 

iff 

\/q(\fr(r tXZ)q»reY)Z)p»qe±-). 
This means that X ® y 1 - C _L is equivalent to 

\/p(\/q(\/r(r e iDgir e Y)Dj>ig el) Dj> elj. (a) 

Now, observe that if _L = P, then X L = P for every X C P, and then all facts are equal to P. 
In this degenerated case, (1) holds trivially. Thus, we can assume that there is somep e P 
such that p e _L. Assume that 

\/q(Vr(r &XDq*reY)Dp*qe±) 

holds. In particular, we can pick q = \, and assume that 

Vr(r <=XDr<=Y)Dpe± 

holds. Also assume that there is some r such that r e X but r & Y . Since (r e X D r e Y ) 
is false, the implication 

Vr"(r" eXDr"ey)Dpe-L 

holds trivially, and from (a), this implies that p e_L, contradicting the choice of p. Thus, 
X ® y- 1 C _L implies that X C y. Conversely, assume that X CY holds. For every p, if 

Vg(Vr-(r- e X Z) <7 • f e y) D p * q £l) 

holds, then this holds for q = 1, and since Vr"(r" e X D r e y) also holds, we conclude than 
p g _L, establishing that X ® y- 1 C _L holds. This concludes the proof of (1). Property (2) 
follows from Lemma 8. In fact, by Lemma 1 1, the preservation of least upper bounds is also a 
consequence of property (1) just proved above. □ 

Putting things together, we have the following lemma showing that every phase structures 
gives rise to a core Girard structure. 

Lemma 18 Given a phase structure P = (P, ., 1, if we define X ® Y = and 
I =J_- L , then D = (P- 11 - , C, ®, I, 1- ) is a core Girard structure, the lattice operations being 
defined by X AY = X nY and X V Y = (X U Y)^. 
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Proof. This follows from Lemma 17 and the fact that ■ L± is a closure operation. □ 

Girard defines validity in a phase structure almost as we did in Definition 12, but in terms 
of valuations into the set of facts of P, and P (= A[v] holds iff 1 e v(A) (see Girard [7]). 
Recall that I = {l}" 1 " 1 . Thus, given any fact X, if 1 e X then {1} C X, which implies 
{I}" 1 " 1 C X LL , that is I C X, since X is a fact (X = X LL ). Conversely, if I C X, since 
I = {l}- 1 - 1 , then 1 e X. Thus, for a fact X, we have 1 e X iff I C X. This establishes the 
equivalence of Girard's notion of validity in terms of phase structures and the notion given in 
Definition 12. 

Interestingly, every core Girard structure arises from a phase structure, as shown in the 
following lemma. 

Lemma 19 Given a core Girard structure D = (D,<,», 1,~), if we define the set _L by 
_L = {a: e D \ x < 0}, then P = {D, •, 1, _L) is a phase structure such that the core Girard 
structure D' — (D- 1 - 1 , C, ®, I, 1 " ) defined in Lemma 18 is isomorphic to D. 

Proof. Given any subset X of D, let lower(X) denote the set of lower bounds of X and 
upper(X) denote the set of upper bounds of X. Also, let ~ X = {~ a: | a: e X}. One easily 
verifies that X 1 - = lower(~ X), upperyX) = ~ lower(~ X), and X^ 1 - = lower(upper(X)). 
Thus, since D is a complete lattice, every fact X- 1 - 1 - = lower(upper(X)) of P corresponds 
uniquely to the lower ideal lower(\J X), which itself corresponds uniquely to V^- This 
mapping establishes a bijection between D and D', and it is easily checked that it is an 
isomorphism. □ 

In Lemma 16, we have shown that the semantics given by core Girard structures (or 
equivalently phase structures) is sound with respect to the proof system. We can also show 
that the proof system is complete w.r.t. this semantics. 

Lemma 20 If a sequent T i- A is valid (in phase semantics), then it is provable in Ciuq. 

Proof. First of all, note that it is enough to prove completeness for sequents of the form 
i- A, i.e. propositions. At least two proofs can be given. The first one, suggested by Avron [2], 
consists in two steps. The first step is to prove completeness w.r.t. core Girard prestructures. 
For this, define an equivalence relation = on propositions as follows: A = B iff both 
sequents A t- B and B i- A are provable. Then, define an algebraic structure on the set D of 
equivalence classes modulo = by setting 



1 



[1], 
[0], 
[I], 

[J-L 
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[A] || [B] 
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[A] . [B] 

[A] V [B] 
[A] A [B] 



[A ® B], 
[A © B], 
[A&B], 



~ [A] 



and define [A] < [5] iff A t- B is provable. One can then check that D = (D, < , •, 1 , ~) is 
a core Girard prestructure. Note that 1 < [A] iff A is provable. If we pick the valuation v 
such that v(P) = [P] for every atom P, then v(A) = [A], and if A is valid, then in particular 
D |= A[v], that is 1 < [A], and thus A is provable. The second step is to show that every 
core Girard prestructure can be embedded into a core Girard structure, and this in preserving 
existing least upper bounds and greatest lower bounds. This is easily shown by using the Mac 
Neille completion and Theorem 1 . 

The second proof due to Girard consists in producing a particular phase structure and 
a particular valuation, such that validity amounts to provability (see Girard [7]). This 
construction appears to be another way of constructing the structure D defined in the first 
proof, in terms of a phase structure. Note that the set M of finite multisets of formulae 
is a commutative monoid under multiset union (T • A = T,A), with identity 0. If we let 
_L = {r | i- r is provable}, we can check that the sets of the form 



are facts, because Pr(A) = PriA^)^. If we define the valuation v such that v(P) = Pr(P) 
for every atom P, we can check that v(A) = Pr(A). Since A is valid, D |= A[v], that is, 
0 e Pr(A), and thus A is provable. □ 

We now extend the above semantics to (full) linear logic. For this, we need to add a unary 
operation □ to interpret the connective ! (of course). 

Definition 1 5 A Girard structure is a sextuple G - (G, <, •, 1, ~, □) such that the quintuple 
{G, <, ; 1, ~) is a core Girard structure, and □ : G — > G is a unary operator satisfying the 
following properties: for all x,y e G, 



(1) □(!) = !; 

(2) n(x) < x; 

(3) □(□(*)) = □(*); 

(4) n(x).n(y) = n(x Ay). 

Definition 12 is extended to the exponentials as follows: 

v(\A) = n(v(A)), 
v(?A) = ~ D(~ v(A)). 



Pr(A) = {r | i- T, A is provable}, 
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The following lemma is needed to show soundness of this semantics. 
Lemma 21 In every Girard structure, the following properties hold: 

(1) n(x) < 1; 

(2) n(x).y< y; 

(3) n(x) ,n(x) = n(x); 

(4) Ifx<y then n(x) < U{y); 

(5) Ifl<x then\J(x) = 1; 

(6) Ifn(x) < y thenU(x) < U(y); 

(7) If x\ • ... • x n < y then D(x\) • . . . • \3(x n ) < □ (?/). 

Proof. These properties are easy to prove. Property (1) holds because 

n(x) = n(x). l = n(x) . n(i) = n(x a l) < x a i < l. 

For (2), since by (1), n(x) < 1, by monotonicity of •, we have □ (x) • y < 1 • y = y. For (3), 
U(x) • n(x) = n(x Ax) = n(x). For (4), If x < y then x - x Ay. Thus, n(x) = n(x A y) = 
\J(x) • \J(y) < \J(y), by (2). It is clear that (5) follows from (1) and (4). If n(x) < y, by 
(4), we have □(□(a;)) < n(y), and since □(□(a;)) = \J(x), we have n(x) < Since 
n(x) < x, if x\ • . . . • x n < y then D(a;i) • . . . • n(x n ) < y. Since n(x) • □(?/) = U(x A y), 
we have U(x\) ..... U(x n ) - U(x\ A ... A x n ), and so \3(x± A . . . A x n ) < y. By (6), we get 
U(xi A ... A x n ) < n(y), that isD(a;i) ..... n(x n ) < n(y). □ 

Lemma 22 IfT i A w provable in linear logic, then for every Girard structure G and every 
valuation v, G |= (r i- A)[v]. As a corollary, T i- A is valid. 

Proof. Immediate by Lemma 2 1 . □ 

We now give the following construction which shows how a Girard structure arises from a 
core Girard structure. 

Theorem 2 Let G = (G, <, ., 1, be a Girard structure. The set F defined by 

F-{x^G\x- D(a;)} satisfies the following properties: 

(1) F is closed under arbitrary least upper bounds. In particular, 0 e F; 

(2) F is closed under •; 
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(3) x % x - x for every x G F; 

(4) The identity element 1 is the greatest element of F. 
Furthermore, for every a G G, D(a) = \/{x & F \ x < a}. 

Conversely, given a core Girard structure (G, <, •, 1, ~) and a subset F of G satisfying 
the properties (l)-(4), then if we define □ by D(a) = \/{x g F \ x < a}, the sextuple 
G = (G, <,», 1, ~, □) is a Girard structure. 

Proof. Let {xj}j e j be any family of elements from F, i.e., such that \3(xj) = Xj 
for all i g J. Since Xj < \J j s j{xj}, by monotonicity of □ (proved in Lemma 21), 
n(xj) < □ (Vj e j{xj}), and since U(xj) = Xj for all i g J, we have < □ (Vje j{ !E j})' 
and thus 

V{^}<n(V{^})- 

Since □ (Vj e j{ !E j}) < Vj e j{ x j} holds by property (2) of the definition of □ (Definition 15), 
we have 

□ (Vte»= VM. 

showing that F is closed under nonempty least upper bounds. Since □ (x) < x for all x g G, 
in particular D(0) < 0, which implies that D(0) = 0, since 0 is the least element of G. 
Therefore, F is closed under arbitrary least upper bounds. 

For x, y g F, we have x • y = \3(x) • \3(y) = \3(x A y), by property (4) of the definition 
of □. Thus, n(x • y) = n(U(x A y)) = n(x A y), by property (3) of the definition of □. 
Therefore, n(x • y) = x • y. 

For any x g F, we have x • x = \3(x) • \3(x) = n(x A x) = \3(x) = x. Therefore, x • x - x. 

Since □ (x) < 1 by property 1 of the definition of □ , for any i e F,we have x = □ (x) < 1 . 
Also, by Lemma 21, D(l) = 1. Therefore, 1 is the greatest element of F. 

For every x g F, by monotonicity of □, x < a implies \3(x) < D(a), that is x < D(a), 
since n(x) = x. But we also have □ (□ (a)) = D(a), that is, D(a) g F, and thus 
\/{x g F | x < a} = D(a) for every a g G. This concludes the proof of the first half of the 
theorem. 

Conversely, assume that F has the properties (l)-(4), and define □ such that □ (a) = \J{x g 
F | x < a}. First, note that since F is closed under arbitrary least upper bounds, D(a) g F 
for every a g G, and obviously, □ (a) = a if a g F. 

Clearly, □ (a) < a for all a g G, property (2) of the definition of □ . 
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Since 1 is the greatest element of F, we also have D(a) < 1 for all a e G, property (1) of 
the definition of □ . 

Since F is closed under arbitrary least upper bounds, □ (a) = \/{x e F \ x < a} g F, and 
thus, □(□(a)) = \/{y e F \ y < D(a)} = D(a), property (3) of the definition of □. 

Since x < 1 for every x & F, for a:,?/ g i* 1 , we have x»y<x»\ = x and 
x • y < I • y - y, which implies that x • y < x Ay. Thus, a • b < \/{x g F \ x < a A b}, that 
is, a • b < U(a A b), which implies □ (a) • □(£>) < D(a A 6), since D(a) < a, and □(£>) < 6. 
Also, since • distributes over \/ s 

□ (a) . U(b) = e F \ x < a}) . (\/{y z F \ y < b}) 

= \J{x , y \ x,y <= F, x < a, y < b}. 

Since Q(o A I) < a A b < a, D(a A 6) < a A b < 6, D(a A 6) G F, and z • z = z for all 
z & F, we have □ (a A 6) < D(a) • □(&). Therefore, D(a) • □ (6) = □ (a A 6), property (4) of 
the definition of □ . This concludes the proof of the second half of the theorem. □ 

One can show that in every core Girard structure G, the subset 

F - {x g G | x • x = x and x < 1} 

satisfies the properties of Theorem 2. Thus, we obtain the following lemma, showing that 
every core Girard structure can be extended to a Girard structure. 

Lemma 23 Every core Girard structure G can be extended to a Girard structure by defining 
the operators such that\3(a) = \/{x <aAl|a;»a; = x}. 

Another interesting property of □ showing that it is the fixed point of some simple operators 
is given in the following lemma. 

Lemma 24 In every Girard structure G, for every a e G, we have the following identities: 

(1) a(a) = (aA 1) .□(a), 
and 

(2) U{a) = (a A 1) A (D(a) . D(a)). 

Proof. First, we prove (1). (i) Recall from Lemma 21 that D(a) • D(a) = D(a). 
(ii) We have n(a) = D(a) . 1 = n(a) •□(l) = D(oA 1). (iii) If x < 1, then x • y < y, since 
x • y < \ • y = y. Since a A 1 < 1, using (iii), we have (a A 1) • D(a) < D(a). Using 
(ii) and the fact that n(x) < x for every x e G, we have □ (a) = □ (a A 1) < a A 1. Using 
(i) and the monotonicity of •, we have D(a) = D(a) • D(a) < (a A 1) • D(a). Therefore, 
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□ (a) = (a A 1) • n(a), as desired. We now prove (2). Since □ (a) • D(a) = D(a), we just have 
to prove that rj(a) = (a A 1) A D(a). Since D(a) < a and D(a) < 1, we have □ (a) < a A 1 , 
and thus □ (a) = (a A 1) A D(a). □ 

Lemma 24 shows that D(a) is a fixed point of the operator x i-> (a A 1) • x, for every 
a e G (and also of the operator ih(oM)A(ii a;)). Since G is a complete lattice, and this 
operator is monotonic, by Tarski's fixed point theorem, the set of fixed points of this operator 
is a complete lattice. In particular, since • distributes over V> the least fixed point of this 
operator is given by the expression 

V <8>( a A !)• 

n>l n. 

This connection probably deserves further investigations. The interest in the identity D(a) = 
(a A 1) A (D(a) • D(a)) stems from the fact that it implies the properties: (i) D(a) < a; 
(ii) □ (a) < 1 ; and (iii) □ (a) • □ (a) = □ (a) (due to Yves Lafont). In turn, these properties imply 
the soundness of the inference rules (dereliction: left), (weakening: left), and (contraction: 
left). Thus, we obtain an equivalent proof system for linear logic if we add the axiom 
\A o-o (A & I) & (\A ® \A) and delete the above rules. By duality, we obtain an equivalent 
proof system for linear logic if we add the axiom ?A o-o (A © _L) © (1A (J 1A) and delete the 
rules (dereliction: right), (weakening: right), and (contraction: right). 

In order to interpret ! and ?, Girard defines an extension of the notion of phase structure 
that he calls a topolinear space (see Girard [7]). We give this definition and compare it with 
Definition 15. 

Definition 1 6 A topolinear space is a triple (P, _L, F), where P is a phase structure, and F is 
a subset of P, the set of closed facts, having the following properties: 

(1) F is closed under arbitrary &. In particular, 1 e F; 

(2) F is closed under (finite) (J (par); 

(3) x\x — x for every x e F; 

(4) The fact _L is the least element of F. 

The linear negation of a closed fact is called an open fact. 

Given a topolinear space, given a valuation v, the fact v(\A) is defined as the greatest open 
fact included in v(A), and v(?A) is defined as the least closed fact containing v(A). In other 
words: 

v(\A) = (IJiX 1 - | X g F, X 1 - C v(A)})~ LJ ~, v(lA) = e F \ X D v(A)}. 
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Using the correspondence between core Girard structures and phase structures given by 
Lemma 18, it is clear that the subset F of Theorem 2 is the collection of open facts of 
Girard's topolinear space, and that the definition of v(lA) corresponds exactly to the definition 
□ (a) = \/{x e F | x < a} (by the definition of the least upper bound of a fact). 

As in the case of core Girard structures, not only do we have soundness, but also 
completeness. 

Lemma 25 If a sequent T t- A is valid (in Girard structures), then it is provable in Cin^'. 

Proof. As in Lemma 20, at least two proofs are possible. The first proof is an extension of 
Avron's proof [2]. It is necessary to extend the operation □ defined on D by □ ([!A]) =![A], to 
the completion by cuts of the core prestructure D. For every y e , we define 



Using the fact that • distributes over arbitrary least upper bounds, we can prove that □ ' has 
the required properties (in particular, that □ t(a) • □ t(6) = □ t(a A £>)). 

The other proof is due to Girard (see [7]). It is a generalization of the proof that we sketched 
in Lemma 20. We consider the phase structure consisting of the commutative monoid of 
multisets of formulae, and define F to be the family of arbitrary intersections of facts of the 
form Pr(?A). One can then prove that a topolinear space is indeed obtained (this uses the fact 
that J) distributes over arbitrary intersections). Then, it is easy to prove that ?Pr(A) = Pr(?A), 
and completeness follows immediately. □ 

Presently, □ has the property that □ (a) • □ (6) = □ (a A b), and it is also easy to verify that 
□ (oAi)<D(o)A □(£>), but in general, we do not have □ (a A 6) = □ (a) A □ (£>). In the next 
section, we propose to modify the proof rules and the semantics so that \A ® \B and \A & IB 
are equivalent. 

6 A Variation On the Semantics of the Connective ! 

On the semantic side, we strengthen Definition 15 as follows. 

Definition 17 A Girard topostructure is a sextuple G = {G, <, •, 1, ~, □) such that the 
quintuple {G,<,», is a core Girard structure, and \3:G — > G is a unary operator 

satisfying the following properties: for all x,y e G, 



□ f (2/) = VUn(z)} 



x e D, { X y < y}. 



(l) □(!) = !; 



(2) n(x) < x; 



(3) □(□(*)) = □(*); 
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(4) n(x).n(y) = n(x Ay). 

(5) n(x Ay) = □ (x) A U(y). 

From (4) and (5), we have that □ (x) • \3(y) = \3(x) A D(y). Definition 12 is extended to the 
exponentials as before: 

v(\A) = n(v(A)), 
v(?A) = ~ D(~ v(A)). 

We add the following rules to the definition of the rules for the exponentials 
Definition 18 

\A, !£?, T i- A 

f! &: left) 



IA & !5,ri- A 

T i- A, ?A, w 
r i- A, 1A © w 



(?©: right) 



I 7 

The system obtained by adding the rules of Definition 1 8 to the rules of the system £in 0 ' ' is 
denoted as £mj l ,? ' !& '*. Soundness is easily obtained. 

Lemma 26 IfT i- A is provable in the system of linear logic £m 0 ' ? ' !& ' ? ®, then for every 
Girard topostructure G and every valuation v, G |= (T t- A)[v]. As a corollary, fi- A« valid. 



Proof. Immediate by Lemma 21 and the fact that □ (x) •□(#) = \J(x) A \J(y). □ 
Theorem 2 is extended as follows. 



Theorem 3 Let G = (G, <,», 1,~,D) a Girard topostructure. The set F defined by 
F = {x e G | x = H(x)} satisfies the following properties: 

(1) F is closed under arbitrary least upper bounds. In particular, 0 e F; 

(2) F is closed under (finite) greatest lower bounds. 

(3) F is closed under •; 

(4) x • x — x for every x e F; 

(5) The identity element 1 is the greatest element of F. 
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Furthermore, for every a e G, 0(a) = \/{x e F \ x < a}. 

Conversely, given a core Girard structure (G, <, •, 1, ~) and a subset F of G satisfying 
the properties (l)-(5), then if we define □ by D(a) = \/{x e F \ x < a}, the sextuple 
G = (G, <,», 1, ~, □) is a Girard topostructure. 

Proof. Properties (1), (3)-(5) are verified as in the proof of Theorem 2. Since D(a A b) = 

□ (a) A □(&), if a = D(a) and b = □(&), then a A b = D(a) A □(&) = D(a A b), proving (2). 

Conversely, since □ (x) e F for every x e G, by (2), D(a) A g F. Since \3(x) = x 
for x & F, □(□(a) A □(&)) = □ (a) A □(&). On the other hand, as in the proof of Theorem 2, 
we have □ (x) • □ (y) = □ (x A y) and □ (□ (x)) = □ (a;), and so, 

□ (□(a) A □(&)) = □(□(a)) . □(□(6)) = □ (a) • □ (6) = □ (a A 6). 

Thus, D(a A 6) = D(a) A □(&), property (2) of Definition 17. □ 

We can also extend the completeness lemma (Lemma 25) to topostructures and Clin'^'' 81 ' 1 ® . 
Lemma 27 If a sequent F i- A is valid (in Girard topostructures), then it is provable in 

Proof. As in the proof of Lemma 25, it is necessary to extend the operation □ defined on D 
by =!L4], to the completion by cuts of the core prestructure D. 2 For every y e D*, 

we define 

□ f (2/) = V/UnO*)} 1 \* e D, {x^ <y}. 

Using the fact that • distributes over arbitrary least upper bounds, we can prove that □ t has 
the required properties, in particular, that □ t(a) • □ ^(b) = □ t(a A b). We can also prove that 

□ f (a A b) = □ f (a) A □ \b), using the fact that (\A 8c \B) o-o \(A & B) is provable, and that 
in the completion by cuts, X* A Y f = n Y^. □ 

We now turn to proof nets. 

7 Proof Nets for Multiplicative Linear Logic 

The same linear sequent can have different proofs differring for bureaucratic reasons, 
namely, that inferences are applied in a different order. For example, the sequent 

i- (A®B)®C,A ± $B ± ,C ± 

2 Recall that in the completion by cuts, for every subset X C D, we have X f = lower(upper(X)), and in 
particular, when X = {x}, we have {x}^ = lower(x). 
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has the following two proofs 



i- A, A L 



i- B, B 1 - 



(®) 



i- A® B,A L ,B L 



(tt) 



i- A® B,A L (J B L 



i- C,C L 



t- (A®B)®C,A L $B L ,C i - 



and 



i- A, A L 



i- B, B L 



i- A® B,A L ,B L 



(®) 



i- (A®5)(g)C,A ± , J B ± ,C ± 



(tt) 



Clearly, these two proofs differ in an inessential way, and it should be possible to come 
up with a notation akin to natural deduction so that these two proofs are identified. This is 
possible for the fragment of multiplicative linear logic involving only ®, (J, and L , using the 
notion of proof net due to Girard (see Girard [7], and Girard, Lafont, and Taylor [6]). First, we 
recall a definition. 

Definition 1 9 A literal is either a propositional letter P or the negation P 1 - of a propositional 
letter. 

Proofs nets are certain unoriented connected graphs whose nodes are labeled with propo- 
sitions. In order to define these graphs, we consider that labeled nodes have entry and exit 
points defined as follows: a literal has a single entry and a single exit, and both a tensor and a 
par have two entry points and a single exit point. 

Definition 20 A proof net (of multiplicative linear logic) is a finite unoriented connected 
node-labeled graph with the following properties: 

(1) For every node labeled with a literal, there is a single arc from the entry point of that 
literal to the entry point of a literal with the same name and the opposite sign; 

(2) For every node labeled with a tensor A® B or a par A\ B, there are two distinct nodes 
labeled with A and B respectively, such that the exit of A is connected to one of the two 
entry points of A® B (resp. A (J B) and the exit of B is connected to the other entry 
point of A® B (resp. A (J B), each by a single arc; 
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(3) The exit point of every node is connected to at most one other node. 



Nodes whose exit points are not connected to any node will be called terminal nodes, or 
leaves. 



For reasons that will become clear when we discuss the criterion for checking that a proof 
net corresponds to a sequential proof, we draw (|j : right) inferences using a broken line, and 
(® : right) inferences using a solid line. The following is an example of a proof net: 



B 



A®B 
(A®B)®C 



C 



A- 



_B J 
B L 



Another example of a proof net is the following: 



C 



A B 
MB 



A- 



B A 



D 



C®(A$B) 



A L ® B L 



As we shall see shortly, there is an algorithm for converting any sequential proof (for 
the multiplicative fragment of linear logic considered here) into a proof net. However, the 
definition of a proof net is a bit too liberal, due the local nature of the conditions involved, 
and some proof nets are unsound, in the sense that they do not correspond to any sequential 
proof. For technical reasons, we will need a slightly more liberal notion of a proof net. In 
fact, it turns out that this notion corresponds precisely to the notion of a sequential deduction, 
a sequential deduction being similar to a sequential proof, except that leaf nodes can also be 
labeled with arbitrary sequents i- A, where A is a proposition, rather than only axioms. 

Definition 21 A deduction net (of multiplicative linear logic) is a finite unoriented connected 
node-labeled graph satisfying properties (I) and (3) of Definition 20, and such that if property 
(2) does not hold for some node, then both entry points of such a node are not connected to 
any other node. 
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Thus, a proof net is a deduction net that also satisfies property (2) of Definition 20. Contrary 
to a proof net, a deduction net may have nodes whose entry points are not connected to any 
other node. Such a node is called an initial node, or root. The following lemma is easily 
shown. 

Lemma 28 Let II be a deduction net such that k of its terminal nodes are labeled with some 
propositions A\, . . . , Ak, and let IT' be some other deduction net having k of its entry nodes 
labeled with A\, .. . , A^. The graph obtained by grafting IT' onto IT by identifying each 
selected terminal node of II labeled with A{ with the corresponding entry node of IV labeled 
with A{ is a deduction net. 

One can define a transformation that produces a deduction net from a sequential deduction, 
but not all deduction nets come from a sequential deduction. In order to single out which 
deduction nets really correspond to sequential deductions, one needs a global criterion. In his 
seminal paper, Girard gave such a criterion for proof nets, the "long trip condition" [7]. Later, 
Danos and Regnier proposed a different criterion [5]. 

We now present the Danos-Regnier criterion for soundness of a deduction net. This 
criterion is equivalent to Girard's original "trip conditions" criterion, but it is somewhat more 
manageable. It is convenient to consider that there are two kinds of edges: 

(1) Edges connecting the exit of A and B to the entries of a tensor A ® B and edges connecting 
the entry of some A to the entry of some A 1 - , considered as solid; 

(2) Edges connecting the exit of A and B to the entries of a par A (J B, considered as soft. 

Definition 22 Given a deduction net IT, a switch graph associated with IT is any subgraph of 
IT obtained by deleting exactly one of the two soft edges associated with every par node in IT 
(and keeping the other soft edge). 

The Danos-Regnier criterion for soundness of a deduction net is stated as follows (see Danos 
and Regnier [5], and Danos [4]). 

Definition 23 A deduction net IT satisfies the Danos-Regnier criterion, or is sound, iff every 
switch graph associated with IT is a tree. 
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For example, the following is a sound proof net, since both switch graphs are trees: 



A B ^__Jt. 

A ® B A 1 - (J B L 



On the other hand, the following proof net is unsound, because the (only) switch graph has 
a cycle. 



A B A± 

A®B A L ®B L 



We now give an algorithm for transforming a sequential deduction into a deduction net, and 
show that the resulting proof net satisfies the Danos-Regnier criterion. 

Lemma 29 There is algorithm J\f which, given a deduction IT of a multiplicative sequent 
i- A\, . . . , A n , produces a deduction net J\f(H) whose terminal nodes are in one-to-one 
correspondence with the occurrences of formulae A\, . . . , A n . Furthermore, M(Jl) satisfies 
the Danos-Regnier criterion. 

Proof. The algorithm J\f is defined by induction on the structure of the deduction IT. 

Case 1: IT consists of a single formula i- A. Then Af(H) is the deduction net consisting of 
the single node A. Obviously, Af(Tl) satisfies the Danos-Regnier criterion. 

• IT consists of an axiom i- A, A- 1 . Then N"(H) is the proof net 



A A L 

Obviously, satisfies the Danos-Regnier criterion. 
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Case 2: IT is of the form 

ni 
i- r, a,b 

(|J: right) 

Then N(Jl) is the proof net 

A/"(rii) 

A B 

~A~\B~ 

obtained by grafting the exit nodes A and B of N<J\\) respectively to the entry nodes A and 
B of the elementary proof net corresponding to the right) inference. If N"(Hi) satisfies the 
Danos-Regnier criterion, then it is easy to verify that Af(Yl) also satisfies the Danos-Regnier 
criterion. 

Case 3: n is of the form 

rii n 2 

i- r, A i- A, B 

(®: right) 

i- T,A, A® B 



Then N"(H) is the proof net 

Af(no Af(U 2 ) 

A B 

A®B 

obtained by grafting the exit node A of M(Jl\} and the exit node B of M(Jl2) respectively to 
the entry nodes A and B of the elementary proof net corresponding to the (® : right) inference. 
If A/"(rii) and A/XF^) satisfy the Danos-Regnier criterion, then it is easy to verify that A/"(n) 
also satisfies the Danos-Regnier criterion. □ 

The transformation Af identifies sequential deductions that differ only for inessential reasons, 
like the order of inferences. For example, the two sequential proofs 



A, A L i- B,B L 

i- A ® B.A^.B 1 - 

' • (tt) 



(®) 



A® B,A L tj B L t-C,C L 
— (®) 

i- (A®B)®C,A ± $B ± ,C ± 
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and 

i- A, A 1 - i- B,B*- 



(®) 

i- A ®B,A L , B L i-C,C L 

(®) 

i-(A®B)®C,A ± ,B ± ,C 1 - 



i- (A®B)®C,A ± $B ± ,C ± 
are mapped to the same proof net: 



B 



A®B 
(A®B)®C 



C 



A- 



B L 



We now wish to show that the Danos-Regnier criterion insures that every proof net that 
satisfies the criterion is of the form A/"(n) for some sequential deduction IT. This is proved 
by induction on the number of nodes in the deduction net. The proof is quite easy when the 
proof net has some terminal node labeled with a par, but the case when all terminal nodes 
are labeled with tensors is tricky and requires a detailed analysis of the structure of deduction 
nets. The problem is that splitting a proof net by chosing any arbitrary terminal node labeled 
with a ® and deleting the two arcs incoming to this node may not yield sound proof nets. For 
example, splitting the proof net below at the node A 1 - ® B L does not yield proof nets. On 
the other hand, splitting either at node D 1 - ® C L or at node C ® (A (J B) yields sound proof 
nets. 



C 



A B 

~~aYb~ 



A- 



B J 



D 



C®{A$B) 



A 1 - ® B J 



The key observation is contained in the following lemma. 
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Lemma 30 Let Yl be a deduction net whose terminal nodes are all labeled with tensors, let 
A® B be one of these tensors, and let IT be the subgraph obtained from IT by deleting this 
terminal node and the two edges from A to A ® B and from B to A ® B. If the criterion 
holds for IT and A and B are connected in IT, then there is a set {C i (J D\,...,Ck tt -Ofc} of 
par nodes such that the graph IT" obtained from IT by deleting all edges from Ci to Ci (J D{ 
and from Di to Ci (J Di, i — 1, . . . ,k, consists of three disjoint maximal connected components 
which are deduction nets satisfying the criterion. Furthermore, without any loss of generality, 
it can be assumed that one component Yl[ contains both A and the Ci, another component IT2 
contains both B and the Di, and the third IT3 contains the Ci (J Di, i - 1 , . . . , k. 

Proof. Let us examine closely what happens when there is a terminal node labeled A® B 
such that A and B are connected in the subgraph IT' defined above. 

• If A and B are connected in IT', then IT' itself is connected. Otherwise, IT would consist of 
at least two disjoint maximal connected components, one of which does not contain both A 
and B, in which case, IT would not be connected, a contradiction. 

• IT' contains some par node C (J D. Otherwise, the only switch graph of IT' would be IT' 
itself, and similarly for IT, and both IT and IT' would be trees. But then, A and B would be 
connected in IT', and this would imply the existence of a cycle in IT, a contradiction. 

• For every path p in IT' from A to B, there is some par node C (J D such that the path p 
contains both edges from C to C (J D and from D to C (J D. Otherwise, there is in IT' a path 
p from A to B which uses at most one of the two incoming edges into each par node. Then, 
it is possible to pick a choice of the soft edges in IT' (and thus in IT) involving the edges 
used by the pathp, so that this is a path from A to B in some switch graph of IT'. However, 
in IT, this path yields a cycle together with the edges from A to A®B and from B to A®B. 

• From the previous item, there is a set {Ci (J D\, . . . , Ck tt -Ofc} of par nodes such that every 
path in IT' from A to B contains both edges from Ci to Ci (J Di and from Di to Ci (J Di, 
for some i, 1 < i < k. The graph IT" obtained from IT by deleting all edges from Ci to 
Ci |J Di and from Di to Ci (J Di, i - l,...,k, consists of three disjoint maximal connected 
components. Furthermore, without any loss of generality, it can be assumed that one of the 
components contains both A and the Ci, another component contains both B and the Di, 
and the third contains the Ci (J Di, i = 1 , . . . , k. 

Let us first delete the edges from Ci to Ci (J Di in TT', i = 1, . . . , k. We must obtain two 
disjoint maximal connected components. Indeed, since every path in IT from A to B must 
contain for some i (1 < i < k) both edges from Ci to Ci (J Di and from Di to Ci (J Di, 
the resulting graph is not connected, and the maximal connected components containing A 
and B must be disjoint. On the other hand, if we had at least three disjoint components, IT 
would not be connected. Thus, we have two disjoint connected components, TTi containing 
the d and A (or symmetrically B), and IT" containing the Di, the Ci (J Di, and B (or 
symmetrically A). Let us now delete the edges from Di to Ci (J Di in IT", i = 1 , . . . , k. The 
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component IT'" must split into two disjoint connected components. Indeed, if the resulting 
graph were still connected, then it would be possible to connect A and B in IT' without 
passing through some edge from Di to C; (J Di for some i (1 < i < k), a contradiction. But 
we also cannot have more than two disjoint components arising from IT'", since otherwise 
IT'" would not be connected. Finally, note that B and the C; (J Di (1 < i < k) are not in the 
same component. Otherwise, by chosing a switch graph of IT in which the edge from C; 
to Ci |J Di (1 < i < k) is selected, we would obtain a cycle. Thus, we have three disjoint 
maximal components, ITi containing the C; and A, IT2 containing the Di and B, and II3 
containing the Ci (J Di, i - 1 , . . . , k. 

• It is easily checked that 111, U2, and IT3, are deduction nets satisfying the criterion, and that 
n 3 has nodes labeled with C\ (J D\ , . . . , Ck tt -Ofc among its entry points. □ 

We can now prove the correctness of the Danos-Regnier criterion [5] (see also Danos [4]). 

Theorem 4 A deduction net IT can be obtained from some sequential deduction ( i.e., is of the 
form M '(Ilo) for some sequential deduction Hq) iff every switch graph associated with IT is a 
tree. 

Proof. The necessity of the criterion has already been checked in Lemma 29. Thus, we turn 
to the sufficiency of the criterion. The proof proceeds by induction on the number of nodes 
in the deduction net. The case where the deduction net has a single node is clear. Otherwise, 
there are two cases: 

Case 1. Some terminal node is labeled with a par, say A (J B. Consider the subgraph IT' 
obtained from IT by deleting the terminal node in question and the two edges from A to A (J B 
and from B to A (J B. We claim that IT is a deduction net satisfying the correctness criterion. 
Indeed, if any switch graph obtained from IT is not a tree, we also obtain a bad switch graph 
for IT by putting back the node A (J B and connecting it to either A or B (but not both). 

Case 2. Every terminal node is labeled with a tensor. 

This case is more delicate, as deleting any terminal node A® B and the edges from A 
to A ® B and from B to A ® B does not necessarily yield a deduction net satisfying the 
correctness criterion. However, we have the following claim: 

Claim: There is a least some terminal node labeled A® B such that the subgraph IT' 
obtained from IT by deleting this terminal node and the two edges from A to A ® B and from 
B to A ® B is composed of two disjoint deduction nets H[ (having A as a terminal node) and 
IT2 (having B as a terminal node) which both satisfy the criterion. 

If there is a terminal node labeled with a tensor A® B and the claim fails, since IT is 
connected and has at least two nodes, nodes labeled A and B connected to the node A® B 
must exist in IT, and A and B must be connected in IT, since otherwise, there would be at 
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least three maximal connected components, contradicting the fact that IT is connected. Thus, 
we can apply Lemma 30, and there is a set {Ci (J D\,...,Ck tt -Ofc} of par nodes such that 
the graph IT" obtained from IT' by deleting all edges from C; to C; (J Di and from Di to 
Ci (J Di, i = 1, . . . , k, consists of three disjoint maximal connected components which are 
deduction nets satisfying the criterion. Furthermore, without any loss of generality, it can be 
assumed that one component II ! contains both A and the Ci, another component II2 contains 
both B and the Di, and the third II3 contains the Ci (J Di, i - 1, . . . , k. Since II3 is strictly 
smaller than n, we conclude that the claim holds for n 3 by applying the induction hypothesis. 
Thus, II3 is composed of two disjoint deduction nets n' 3 and IT" and of a tensor node A' ® B' 
connected to A' in n' 3 and to B' in IT". Also observe that the graph 11 — 113 obtained from 111 , 
n 2 by reconnecting the node A ® B to A in IT 1 and to B in YI2, and by reconnecting every 
node d (J Di to both Ci in ITi and to Di in TI2, i = 1, . . . , k, is a deduction net satisfying 
the criterion. The nodes C\ (J D\,...,Ck tt -Ofc must be either all in Yl' 3 or all in II", since 
otherwise, 11 — 113 being a deduction net, it would be possible to create a cycle between A' 
and B' in some switch graph of II. But then, A' ® B' is a terminal node of TI satisfying the 
condition of the claim. 

This concludes the proof of the claim, and thus the proof of the theorem. □ 

If we observe that the cut rule 

1- T, A 1- A, A 1 - 

(cut) 

1- r,A 

behaves just like the following special case of the (®: right) rule 

1- T, A 1- A, A 1 - 



1- T, A, A ® A 1 - 



(®: right), 



we can extend the above treatment of proof nets, including Lemma 29 and Theorem 4, to proof 
nets including cut links, which are links of the form 

A A 1 - 



CUT 

Every node labeled with CUT is necessarily a terminal node. 



The proof of Theorem 4 yields an 0(n 2 )-time algorithm for testing whether a deduction net 
comes from a sequential deduction. This is not a trivial result, since the naive method yields 
an exponential-time algorithm. Girard has announced the existence of an 0(n 2 ) algorithm, 
but as far as we know, no such algorithm has been published. The algorithm presented below 
works recursively. If the deduction net only has axiom links, the algorithm succeeds iff the 
deduction net consists of a single axiom link between A and A L or of a single node A (for 
some proposition A). If the deduction net has some terminal node labeled with a par node 
A (J B, test recursively the subnets obtained by deleting the edges from A (J B to A and to B. 
If the deduction net has terminal nodes only labeled with tensor nodes, try to find a splitting 
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tensor node as follows. First, for each terminal node A® B, delete the edges from A ® B to 
A and to B. Then, find the maximally connected components of this graph. If the resulting 
graph is connected, the algorithm stops with failure. Otherwise, some terminal node labeled 
with a tensor A® B has been found such that A and B belong to two disjoint deduction nets 
rii and II2 after the edges from A ® B to A and to B have been removed from the original 
deduction net (there may be several choices, just consider the terminal nodes in some fixed 
order and pick the first one). Then, test recursively the subnets Tl{ and II2. 

Since maximally connected components can be found in linear time, the cost of finding a 
splitting tensor is 0(n). It is then clear that the algorithm runs in 0(n 2 ). 

Since a proof net is a special deduction net, we also obtain an 0(n 2 )-time algorithm for 
testing whether a proof net comes from a sequential proof. 

8 Conclusion 

We have provided an introduction to linear logic, focusing on its prepositional fragment. 
In particular, we describe an algebraic semantics for linear logic, phase semantics. Contrary 
to Girard's original presentation [7] in which the notions of closure operation and Galois 
connection are implicit, we present phase semantics explicitly as a specific instance of a Galois 
connection. We hope that such an approach helps to understand better the motivations for this 
semantics, and also the reason why linear logic is sound and complete for this semantics. We 
also define proof nets for multiplicative linear logic and give a direct proof of the correctness 
of the Danos/Regnier criterion. This proof relies on a purely graph-theoretic decomposition 
lemma which appears to be new. As a corollary, we obtain an 0(n 2 )-time algorithm for testing 
the correctness of a proof net. The existence of such an algorithm was conjectured before, but 
our algorithm appears to be original. In a forthcoming paper, we intend to cover the quantifiers, 
proof nets for full linear logic, cut elimination, and the semantics of coherent spaces. 
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9 Appendix: Summary of Notation 

The logical constants, logical connectives, and semantic symbols of linear logic are listed 
below. 

I multiplicative true 

_L multiplicative false 

1 additive true 

0 additive false 

® multiplicative and (tensor) 

(J multiplicative or (par) 

& addittive and 

© addittive or 

-o linear (multiplicative) implication 

0- o linear (multiplicative) equivalence 
- 1 linear (multiplicative) negation 

! of course 

? why not 

~ interpretation of - 1 

• interpretation of ® 

j j interpretation of (J 

□ interpretation of ! 

Other symbols are listed below. 

U binary union 

fl binary intersection 

U union of a family 

f| intersection of a family 

A binary greatest lower bound 

V binary least upper bound 

/\ greatest lower bound of a family 

V least upper bound of a family 
e set membership 

C set inclusion 

0 empty set 

1- > functional mapping 
< partial order 

t closure operation 

= equivalence relation 
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